Dafny:

* Enforce ghost vs. non-ghost separation
* Allow ghost parameters and ghost locals
* Functions are ghost, but allow the non-ghost "function method"

2 files changed, 4 insertions, 4 deletions

diff --git a/Test/VSI-Benchmarks/b2.dfy b/Test/VSI-Benchmarks/b2.dfy
index 53eb49a8..6c0cfe81 100644
--- a/Test/VSI-Benchmarks/b2.dfy
+++ b/Test/VSI-Benchmarks/b2.dfy
@@ -44,10 +44,10 @@ class Array {
     requires 0 <= n;

     modifies this;

     ensures |contents| == n;

-  function Length(): int

+  function method Length(): int

     reads this;

   { |contents| }

-  function Get(i: int): int

+  function method Get(i: int): int

     requires 0 <= i && i < |contents|;

     reads this;

   { contents[i] }

diff --git a/Test/VSI-Benchmarks/b3.dfy b/Test/VSI-Benchmarks/b3.dfy
index ed121ba0..e3a91ab2 100644
--- a/Test/VSI-Benchmarks/b3.dfy
+++ b/Test/VSI-Benchmarks/b3.dfy
@@ -24,11 +24,11 @@ class Queue<T> {
     requires 0 < |contents|;

     modifies this;

     ensures contents == old(contents)[1..] && x == old(contents)[0];

-  function Head(): T

+  function method Head(): T

     requires 0 < |contents|;

     reads this;

   { contents[0] }

-  function Get(i: int): T

+  function method Get(i: int): T

     requires 0 <= i && i < |contents|;

     reads this;

   { contents[i] }